We discussed about the annoying groupOfNames limitation this draft proposes to solve, should we think of using this? http://www.ietf.org/internet-drafts/draft-findlay-ldap-groupofentries-00.txt Simo.